3 ms·
just recently there was a clickjacking attack that affected most popular password manager extensions. It tricked the managers into filling passwords to random p
by karel-3d 1y ago
just recently there was a clickjacking attack that affected most popular password manager extensions. It tricked the managers into filling passwords to random pages, worked on almost all extensions and all pages.
- eviks 1y agoAre you refering to this one https://marektoth.com/blog/dom-based-extension-clickjacking https://marektoth.com/blog/dom-based-extension-clickjacking? This doesn't seem to be "passwords on random pages", only "Personal Data + Credit Card,", passwords are domain-specific unless the website is hacked itself. > The attacker can only steal credentials for the vulnerable domain.
- karel-3d 1y agook that's nice